558 matches found
Amazon Linux 2 : libXfont, --advisory ALAS2-2026-3890 (ALAS-2026-3890)
The version of libXfont installed on the remote host is prior to 1.5.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3890 advisory. A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font...
Important: libXfont
Issue Overview: A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of...
Linux Distros Unpatched Vulnerability : CVE-2026-59679
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but...
Linux Distros Unpatched Vulnerability : CVE-2026-44950
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c copies each glyph's bitmap into a single buffer. Existing checks validates only that the source...
Oracle Linux 10 : libXfont2 (ELSA-2026-47079)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47079 advisory. 2.0.6-5.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191882 Resolves:...
Amazon Linux 2 : libXfont, --advisory ALAS2-2026-3815 (ALAS-2026-3815)
The version of libXfont installed on the remote host is prior to 1.5.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3815 advisory. BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 PCF Font Parsing Heap Buffer Overflow...
USN-8560-1: libXfont vulnerabilities
It was discovered that libXfont incorrectly handled scaling bitmap fonts, leading to a heap buffer overflow. An attacker able to access the X server could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2026-56001 It was...
[SECURITY] [DSA 6388-1] libxfont security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6388-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2026 https://www.debian.org/security/faq -...
Debian dsa-6388 : libxfont-dev - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6388 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6388-1 [email protected] https://www.debian.org/securit...
Debian dla-4678 : libxfont-dev - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4678 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4678-1 [email protected]...
[SECURITY] [DLA 4678-1] libxfont security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4678-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura July 12, 2026 https://wiki.debian.org/LTS -...
CVE-2026-50256
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...
CVE-2026-50256
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...
MiracleLinux 4 : libXfont-1.4.5-5.AXS4 (AXSA:2015-460:01)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2015-460:01 advisory. The libXfont package provides the X.Org libXfont runtime library. X.Org is an open source implementation of the X Window System. Security issues fixe...
MiracleLinux 3 : libXfont-1.2.2-1.0.5.AXS3 (AXSA:2014-239:01)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-239:01 advisory. X.Org X11 libXfont runtime library Security issues fied with this release: CVE-2013-6462 Stack-based buffer overflow in the bdfReadCharacters function in...
MiracleLinux 4 : libXfont-1.4.5-3.AXS4 (AXSA:2014-146:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-146:01 advisory. X.Org X11 libXfont runtime library Security issues fixed with this release: CVE-2013-6462 Stack-based buffer overflow in the bdfReadCharacters function in...
EUVD-2007-1349
Malware in sbrugna...
EUVD-2017-5237
Malware in sbrugna...